DENVER, July 27 /PRNewswire/ -- Compliance Research Group (CRG), an industry analyst firm focused on IT risk management and compliance, has completed its latest Research Brief on cloud computing compliance and IT security. The brief, Managing Compliance and Security for Cloud Computing, provides insight on how a top-down view of all IT resources within a cloud-based location can deliver a stronger management and enforcement of compliance policies. CRG analysts recommend compliance and security managed from a cloud platform to properly monitor and control a mix of sensitive information resources located in both cloud-based and enterprise applications.

"Sensitive covered information inside trusted enterprise networks traditionally have been secure islands managed individually," said Mark Willoughby, a principal and lead analyst at CRG. "Adopting cloud computing means organizations must update how they identify threats and deploying defenses. Efficient and effective risk management for compliance policies governing covered information in both the cloud and trusted enterprise networks demands a new perspective."

According to the CRG research, distributed resources are best monitored from a top-down cloud perspective to correlate user actions and events across a wide scale. Isolated or stand-alone networks and resources lack visibility into cloud-based resources, and cannot offer the unified compliance perspective required by centralized risk management policies and procedures.

Without the top-down perspective the risk of redundancy and duplication increases, and the valuable intelligence gained by correlating events and actions across all resources does not exist. For instance, correlations are the best way to gain clarity into attacks on multiple addresses originating from anonymous cloud-based locations, a favorite denial of service tactic most recently used against South Korean and U.S. government websites.

"We apply a lesson from history to the cloud-based risk management approach - using the barbarians to conquer the barbarians. Throughout history, since Rome defeated Carthage, risks have been reduced and attacks thwarted by borrowing strategies and tactics from adversaries," Willoughby said. "Those correlations are best done from the strategic high ground offered by cloud-based compliance policy management. Closer to home, correlating credit card transactions processed inside a trusted enterprise network with fulfillment and shipping information located in a cloud-based service can reveal the probability of fraud."

About Compliance Research Group

Compliance Research Group (www.complianceresearchgroup.com) is a Denver-based analyst firm offering custom risk management research and marketing guidance to the IT, security and compliance community. The firm's principal analysts have decades of experience developing IT security strategies and consulting with enterprise IT organizations and solutions providers.

Cloud Expo

Cloud Computing & All That
It Touches In One Location Cloud Computing - Big Data - Internet of Things
SDDC - WebRTC - DevOps
Cloud computing is become a norm within enterprise IT.

The competition among public cloud providers is red hot, private cloud continues to grab increasing shares of IT budgets, and hybrid cloud strategies are beginning to conquer the enterprise IT world.

Big Data is driving dramatic leaps in resource requirements and capabilities, and now the Internet of Things promises an exponential leap in the size of the Internet and Worldwide Web.

The world of SDX now encompasses Software-Defined Data Centers (SDDCs) as the technology world prepares for the Zettabyte Age.

Add the key topics of WebRTC and DevOps into the mix, and you have three days of pure cloud computing that you simply cannot miss.

Delegates will leave Cloud Expo with dramatically increased understanding the entire scope of the entire cloud computing spectrum from storage to security.

Cloud Expo - the world's most established event - offers a vast selection of 130+ technical and strategic Industry Keynotes, General Sessions, Breakout Sessions, and signature Power Panels. The exhibition floor features 100+ exhibitors offering specific solutions and comprehensive strategies. The floor also features two Demo Theaters that give delegates the opportunity to get even closer to the technology they want to see and the people who offer it.

Attend Cloud Expo. Craft your own custom experience. Learn the latest from the world's best technologists. Find the vendors you want and put them to the test.